diff options
| author | Ophestra <cat@gensokyo.uk> | 2026-10-18 18:31:30 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2026-10-18 18:31:30 +0900 |
| commit | f92b4673a19272d8eda1302f3a36cb6073113f83 (patch) | |
| tree | 2dd8f154882736b557ff8c8cac0dabe03c79efe8 /internal/outcome/sptmpdir_test.go | |
| parent | bdca60d4959919a02f744457aaade3d9e2425f3a (diff) | |
internal/outcome: world-executable runtime/tmpdir
This does not reduce security, and saves the trouble of the additional
ACL setup/teardowns.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'internal/outcome/sptmpdir_test.go')
| -rw-r--r-- | internal/outcome/sptmpdir_test.go | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/internal/outcome/sptmpdir_test.go b/internal/outcome/sptmpdir_test.go index 421d65ab..74aceeee 100644 --- a/internal/outcome/sptmpdir_test.go +++ b/internal/outcome/sptmpdir_test.go @@ -21,8 +21,7 @@ func TestSpTmpdirOp(t *testing.T) { }, hst.Template, nil, []stub.Call{ // this op configures the system state and does not make calls during toSystem }, newI(). - Ensure(m("/proc/nonexistent/tmp/hakurei.0/tmpdir"), 0700, true). - UpdatePermType(system.User, m("/proc/nonexistent/tmp/hakurei.0/tmpdir"), acl.Execute). + Ensure(m("/proc/nonexistent/tmp/hakurei.0/tmpdir"), 0711, false). Ensure(m("/proc/nonexistent/tmp/hakurei.0/tmpdir/9"), 01700, true). UpdatePermType(system.User, m("/proc/nonexistent/tmp/hakurei.0/tmpdir/9"), acl.Read|acl.Write|acl.Execute), nil, nil, insertsOps(nil), []stub.Call{ // this op configures the container state and does not make calls during toContainer |